
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/67aa11e0-08b1-3729-8732-afed74543a62.roa
File: 67aa11e0-08b1-3729-8732-afed74543a62.roa (raw, json)
Hash identifier: omdVhEtbwX9PDrahwv4s6W4z9D8yUfjtkMxZGfSneWg=
Subject key identifier: 33:0A:68:34:7E:A7:4C:E8:DA:DA:E1:C2:7E:30:E3:9B:A6:CE:47:FC
Certificate issuer: /CN=1a8794d9-eb16-4b3c-b869-96971b72a93b
Certificate serial: 010D0C9F4328584F119CF280814714787377A320
Authority key identifier: 58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/67aa11e0-08b1-3729-8732-afed74543a62.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 27217
IP address blocks: 52.119.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9c:f2:80:81:47:14:78:73:77:a3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a8794d9-eb16-4b3c-b869-96971b72a93b
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=fc3b32f8-5371-484e-8872-1d494078731c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:51:ce:a6:cb:d8:64:9a:98:4e:02:26:ce:c7:
95:ba:46:e3:6b:e0:33:71:a1:a9:2f:73:75:e0:61:
32:4e:38:fc:0b:f4:89:96:5c:9f:14:a5:13:cc:82:
bd:22:1e:2d:47:e5:25:8d:9d:c6:0d:d7:f6:4c:71:
45:84:7b:27:84:db:d9:f3:be:d6:7e:e0:bb:a5:fa:
09:bf:b7:1d:11:a2:f0:e6:6e:04:78:8c:1a:3b:83:
68:ac:33:af:83:0f:53:f0:cb:32:11:0f:96:7b:11:
71:e6:0e:cc:14:84:a8:7e:31:79:1d:50:f0:8a:91:
60:0d:10:ca:f3:76:0e:f9:fb:c7:6f:53:06:61:c6:
04:f3:bf:90:a4:f9:47:a6:5d:0f:a8:b5:dd:29:3c:
57:69:21:67:51:66:2a:f0:ab:02:81:e3:8a:2f:58:
ff:0a:4d:60:9f:67:01:61:f0:82:ee:12:38:96:c1:
52:9a:f1:b2:71:5d:bd:b2:d3:4e:11:c7:5c:8b:f1:
1c:d2:4c:f0:1f:8a:c1:87:f0:50:76:1e:b4:41:ff:
e2:53:31:1c:27:ec:f3:1f:83:b4:d3:06:16:38:81:
76:4b:c8:fe:f2:f0:62:45:85:71:96:a0:79:93:02:
be:18:ce:81:d9:5f:4b:86:d4:99:29:2e:77:06:2d:
c5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0A:68:34:7E:A7:4C:E8:DA:DA:E1:C2:7E:30:E3:9B:A6:CE:47:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/67aa11e0-08b1-3729-8732-afed74543a62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl
X509v3 Authority Key Identifier:
keyid:58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer
sbgp-ipAddrBlock: critical
IPv4:
52.119.10.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:9e:1e:23:37:30:cb:39:7d:a4:73:5d:f6:dc:b6:2a:66:00:
47:d4:b4:18:6b:dc:55:ff:fa:97:e2:be:97:42:ca:b7:80:81:
f4:9c:07:fa:75:a2:33:15:10:e8:c0:a3:e4:02:24:16:4a:4e:
27:f7:0f:b1:15:67:05:c4:6a:32:d8:ae:4f:ca:8c:53:a0:9c:
2e:b3:2d:c5:06:0a:66:a1:63:00:49:a2:36:86:c2:70:3b:3f:
bb:bd:b8:87:90:e7:ee:0a:ee:cf:ef:7b:9b:b6:d8:c9:83:d5:
de:7f:c5:29:81:fe:ef:2d:f9:78:5d:d6:a0:e4:5f:a1:87:0b:
ba:6d:8c:7b:a1:39:8d:0d:17:ee:52:1e:ba:03:62:88:1e:ea:
b2:d9:a8:5f:04:af:2b:19:09:6c:be:cb:86:59:3c:13:0b:10:
c7:92:98:4e:b2:e2:85:fb:dc:d9:e2:6d:18:04:4f:75:a7:88:
ad:f8:38:7b:a9:d7:ca:e1:d1:6b:88:50:02:85:7d:0d:93:ed:
e0:0c:e5:d6:97:5c:c1:59:9b:4f:89:82:6b:cc:22:09:00:e8:
ad:af:0d:00:39:21:d3:a6:1b:d7:1e:20:34:db:45:86:85:24:
a9:2e:e2:c8:18:ae:4e:56:44:b3:b1:a4:2f:27:01:a0:a0:61:
1b:3e:d2:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPKAgUcUeHN3oyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWE4Nzk0ZDktZWIxNi00YjNjLWI4NjktOTY5NzFiNzJh
OTNiMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZmMzYjMyZjgtNTM3MS00ODRlLTg4NzItMWQ0OTQwNzg3MzFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglHOpsvYZJqYTgImzseVukbja+AzcaGpL3N1
4GEyTjj8C/SJllyfFKUTzIK9Ih4tR+UljZ3GDdf2THFFhHsnhNvZ877WfuC7pfoJ
v7cdEaLw5m4EeIwaO4NorDOvgw9T8MsyEQ+WexFx5g7MFISofjF5HVDwipFgDRDK
83YO+fvHb1MGYcYE87+QpPlHpl0PqLXdKTxXaSFnUWYq8KsCgeOKL1j/Ck1gn2cB
YfCC7hI4lsFSmvGycV29stNOEcdci/Ec0kzwH4rBh/BQdh60Qf/iUzEcJ+zzH4O0
0wYWOIF2S8j+8vBiRYVxlqB5kwK+GM6B2V9LhtSZKS53Bi3FvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDMKaDR+p0zo2trhwn4w45umzkf8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3
OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3MWI3MmE5M2IvNjdhYTExZTAtMDhiMS0z
NzI5LTg3MzItYWZlZDc0NTQzYTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWE4Nzk0ZDktZWIxNi00YjNjLWI4
NjktOTY5NzFiNzJhOTNiLzFhODc5NGQ5LWViMTYtNGIzYy1iODY5LTk2OTcxYjcy
YTkzYi5jcmwwHwYDVR0jBBgwFoAUWGSrqLbG9Ghvh86IX/GHzHvf2y0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3
MWI3MmE5M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHcKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOeHiM3MMs5faRzXfbctipmAEfUtBhr3FX/+pfivpdCyreAgfScB/p1
ojMVEOjAo+QCJBZKTif3D7EVZwXEajLYrk/KjFOgnC6zLcUGCmahYwBJojaGwnA7
P7u9uIeQ5+4K7s/ve5u22MmD1d5/xSmB/u8t+Xhd1qDkX6GHC7ptjHuhOY0NF+5S
HroDYoge6rLZqF8ErysZCWy+y4ZZPBMLEMeSmE6y4oX73NnibRgET3WniK34OHup
18rh0WuIUAKFfQ2T7eAM5daXXMFZm0+JgmvMIgkA6K2vDQA5IdOmG9ceIDTbRYaF
JKku4sgYrk5WRLOxpC8nAaCgYRs+0lA=
-----END CERTIFICATE-----
Generated at Tue Oct 13 05:51:28 2026 by rpki-client